CVE-2017-5930

2.7 lowEPSS 15%

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2017-03-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opensuse:leap
postfixadmin_project:postfixadmin

References

http://lists.opensuse.org/opensuse-updates/2017-02/msg00076.html
http://www.openwall.com/lists/oss-security/2017/02/08/1
http://www.openwall.com/lists/oss-security/2017/02/09/1
http://www.securityfocus.com/bid/96142
https://github.com/postfixadmin/postfixadmin/blob/postfixadmin-3.0.2/CHANGELOG.TXT

Check your stack JSON